Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6vPT31oxiBU5DCF1Y9OQLsdgW0U.roa
File: 6vPT31oxiBU5DCF1Y9OQLsdgW0U.roa (raw, json)
Hash identifier: mSk0kcmIiFWkE2CQPSsNtCkWQE8u/J4nfRPAY2NsSjI=
Subject key identifier: EA:F3:D3:DF:5A:31:88:15:39:0C:21:75:63:D3:90:2E:C7:60:5B:45
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01953C708E4E412B0C1B235025D508F223F1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6vPT31oxiBU5DCF1Y9OQLsdgW0U.roa
Signing time: Tue 25 Feb 2025 09:29:24 +0000
ROA not before: Tue 25 Feb 2025 09:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 5.183.153.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:70:8e:4e:41:2b:0c:1b:23:50:25:d5:08:f2:23:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 25 09:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf3d3df5a318815390c217563d3902ec7605b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:19:6e:26:dd:de:74:96:ac:81:38:a8:25:
5e:4d:d3:b5:6d:f3:a8:c6:5b:58:69:6a:69:70:cf:
43:d7:ba:a0:41:56:df:05:bf:ca:d4:a3:ac:8b:61:
6f:3c:57:c3:bb:dd:ed:53:5c:be:b1:1a:74:e9:ad:
7f:dc:18:08:3f:f1:4d:14:c6:69:1e:ab:3e:4b:3d:
49:d0:16:36:04:b2:5b:40:a1:c8:a0:07:57:27:82:
5a:50:aa:eb:44:86:c9:14:38:ec:76:3c:15:e6:82:
29:bc:20:fd:17:12:d3:d7:e5:6b:ee:70:d5:2e:eb:
be:79:a9:1b:e3:8e:d1:f5:e6:83:72:41:ea:f0:33:
03:67:92:8c:57:03:35:9a:35:ae:28:95:d7:a6:5e:
61:d4:56:6b:f3:64:cd:82:67:19:82:bc:f3:b7:ff:
8d:63:50:1a:db:30:c7:c1:49:68:11:d6:18:b0:92:
1c:31:38:33:0e:00:43:8e:8e:ae:d7:ad:9c:44:1a:
10:77:52:24:b4:59:b5:ac:c0:05:7e:a0:ab:96:a8:
41:83:5e:d8:1b:0f:d6:6d:c5:87:b3:a2:0e:33:5c:
05:7a:27:f6:95:dc:7e:f0:0f:d4:16:fa:1d:4c:e0:
c3:fc:ab:e3:46:14:e8:59:33:e3:8f:60:a9:e4:ed:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F3:D3:DF:5A:31:88:15:39:0C:21:75:63:D3:90:2E:C7:60:5B:45
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6vPT31oxiBU5DCF1Y9OQLsdgW0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.153.0/24
45.133.234.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5d:fc:b0:44:d3:40:20:d9:49:e6:d5:f4:50:20:a5:d0:e5:
25:10:3b:72:a5:5e:3d:a8:88:84:de:94:de:c6:58:ce:bb:f5:
f0:7b:2c:1b:80:8a:2d:b3:8a:55:35:3a:4d:d7:cb:3f:f0:a1:
f5:a2:35:15:60:e3:8d:9a:07:6e:d8:f7:f9:ee:a7:79:fa:69:
b1:17:49:c9:11:ed:c4:d5:8e:73:16:ce:1d:a3:28:7c:0b:31:
b6:62:2a:df:f8:ec:e7:a0:1e:87:2d:f0:00:4f:ed:e6:ce:a6:
33:3a:a2:bc:f5:82:92:92:5d:aa:62:c8:ae:30:f1:b2:12:7e:
00:b0:bd:bf:69:41:8a:6e:bc:71:72:36:ca:33:c1:73:1c:a9:
61:b6:41:17:38:ce:e6:57:c1:b7:18:21:4b:6f:fc:61:f0:ce:
d4:20:00:aa:23:a4:9d:28:ee:ac:3e:e2:f4:b3:19:5f:fa:46:
f0:4e:dd:2f:81:d3:1e:df:d5:cd:12:7d:28:e1:95:d0:92:08:
4c:e0:82:13:36:db:59:e6:a0:69:78:62:60:fa:04:28:56:66:
07:44:9f:19:6f:e7:30:fd:50:f2:d6:3d:21:db:92:7b:d2:c8:
1a:51:c8:9f:3b:b5:9f:6e:95:54:cd:ab:c5:ea:01:fa:d4:2f:
56:c8:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:31 2025 by rpki-client